General
- Target 2026-05-22_d4559112a7ac597031f7d3348263db7a_elex_gh0st-rat_wannacry
- Size 50KB
- Sample260522-ejfwmsgy81
- SHA256 d34bc6017bda0f6c171e7c92eeb247cd17a95708e8e91040781d4426e2e172d4
- MD5 d4559112a7ac597031f7d3348263db7a
- SHA1 936cf4e97971a24298e836ccdb34012284e0af4b
- SHA512 7cd512f6bd8cd7835e54595382ff8c57c87ff55023b74a73efaa0c6e460c86f3ec36785b458719b0609f9a44f78bb65fae9271991e25a028a8f8cd571278386a
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYbd+E23zNdoTA262HT:2zW4eyHJrfS//goCPZT3z/V2lHT
- TLSH T188337E43ED5200B7E0270178941B9B6716B76D12051BBFDAAF80DDC5EC729BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-22_d4559112a7ac597031f7d3348263db7a_elex_gh0st-rat_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_d4559112a7ac597031f7d3348263db7a_elex_gh0st-rat_wannacry.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_d4559112a7ac597031f7d3348263db7a_elex_gh0st-rat_wannacry
- Size 50KB
- SHA256 d34bc6017bda0f6c171e7c92eeb247cd17a95708e8e91040781d4426e2e172d4
- MD5 d4559112a7ac597031f7d3348263db7a
- SHA1 936cf4e97971a24298e836ccdb34012284e0af4b
- SHA512 7cd512f6bd8cd7835e54595382ff8c57c87ff55023b74a73efaa0c6e460c86f3ec36785b458719b0609f9a44f78bb65fae9271991e25a028a8f8cd571278386a
- SSDEEP 768:24iWi9dJ7yZ9yHJGEfSKvr8WG7H7gor+ZlqiIyYbd+E23zNdoTA262HT:2zW4eyHJrfS//goCPZT3z/V2lHT
- TLSH T188337E43ED5200B7E0270178941B9B6716B76D12051BBFDAAF80DDC5EC729BAECB0267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory